$ rpki-client -vvf rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft File: LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft (raw, json) Hash identifier: sdXCZPvdt3c+gy5bzC6pfwW/fCRDLyvl+NSwUcRhnuQ= Subject key identifier: 78:0F:A4:4E:04:FA:6A:53:C2:16:C4:9C:F4:2D:18:42:66:1C:3C:BC Authority key identifier: 2C:E1:10:08:D2:E0:3F:EB:3E:63:7A:D4:F7:E7:27:2E:DC:60:D5:3B Certificate issuer: /CN=A9165456/serialNumber=2CE11008D2E03FEB3E637AD4F7E7272EDC60D53B Certificate serial: 0AC2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft Manifest number: 0AAA Signing time: Thu 04 Sep 2025 19:43:49 +0000 Manifest this update: Thu 04 Sep 2025 19:43:48 +0000 Manifest next update: Thu 11 Sep 2025 19:43:48 +0000 Files and hashes: 1: LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.crl (hash: cqVwPJbtUBfOru4sy9rM101/DvaFv6U+ZfVkmFraOaw=) 2: 5ABD5A320D7A11EB9D346C48C4F9AE02.roa (hash: ibrlLqXyJBvhReQbTY44ZuUpmVrk/0dppjxQ0Xpe60o=) 3: 5977CEE60D7A11EB9D346C48C4F9AE02.roa (hash: oypYrt94xP1HGfkKHJnrEVZNMxQYAmf9WSyWVpRVwus=) 4: 5A15EA040D7A11EB9D346C48C4F9AE02.roa (hash: 1NXDKHdGdwmQ0HPSNP/L0h3g8vj3YJvsOmeCBe7yxT0=) 5: 9A6A637EF48C11EBBDF92914C4F9AE02.roa (hash: lhMvYRsrjVyA66+IzRjCtkWTHGswP9g49oqeoBG1Neg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.crl rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 19:43:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2754 (0xac2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165456, serialNumber=2CE11008D2E03FEB3E637AD4F7E7272EDC60D53B Validity Not Before: Sep 4 19:43:48 2025 GMT Not After : Sep 11 19:43:48 2025 GMT Subject: CN=68b9ebf5-1afe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:86:f8:c0:61:99:2c:c3:d6:90:a7:96:20:fe: 24:86:f3:cd:05:f1:5a:3f:aa:98:e7:2b:78:4f:02: 52:ec:ae:02:10:b3:ec:df:71:56:c0:61:a2:76:da: 50:2c:5a:0f:c8:d5:2a:8a:95:1e:89:fd:6c:0c:99: ec:89:ad:49:3b:c5:0b:4a:3d:45:bc:f0:69:72:39: 2e:91:6d:5f:16:16:3b:49:8b:9b:8e:a4:66:8f:cb: f4:97:58:d9:ba:bd:69:65:d2:ee:ae:12:3e:31:80: ac:16:83:f3:66:1d:1a:d8:06:50:e7:e9:30:07:06: dd:df:11:aa:a0:70:81:89:fe:4d:0c:ad:74:c6:13: 06:e1:f5:3f:db:45:5a:16:44:5e:43:e3:36:07:8c: ce:0b:55:a8:50:b5:41:e9:ff:a6:5d:59:9e:7a:70: 1c:56:29:2c:1a:3c:eb:d0:2f:7f:29:e2:be:14:55: 4f:e8:ab:cf:eb:21:bd:68:11:cf:c5:d4:f0:b1:66: 6f:80:2d:46:11:7c:f5:db:d4:6e:01:d7:d7:c2:27: 9f:5f:5d:b9:59:2d:13:d7:9a:bc:c1:86:d6:45:d4: d0:bb:d2:d4:98:e6:e2:81:9b:84:a0:73:25:8d:da: 5e:2e:52:e4:c6:1f:84:99:79:16:16:84:1d:aa:d1: 1a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:0F:A4:4E:04:FA:6A:53:C2:16:C4:9C:F4:2D:18:42:66:1C:3C:BC X509v3 Authority Key Identifier: keyid:2C:E1:10:08:D2:E0:3F:EB:3E:63:7A:D4:F7:E7:27:2E:DC:60:D5:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:c0:d2:be:55:7c:78:a3:28:5b:16:c4:7e:6f:96:fc:9a:66: 59:56:65:9d:f1:b2:c3:60:d2:59:63:e1:3d:80:fb:e9:ea:e2: a3:54:2a:32:2b:03:9b:16:57:2e:e9:e2:24:01:ba:2f:39:ef: 89:54:1a:17:70:b0:99:55:2c:cf:b1:5e:17:63:fb:d0:54:94: 0c:8b:54:5b:9d:50:06:ca:3b:2d:dc:0a:64:f6:38:6d:82:a3: 2c:d3:5e:d2:0e:01:a2:b7:c3:b0:5a:49:24:c9:aa:ad:b0:21: 7a:10:75:8a:b4:73:fd:ec:aa:cf:b3:24:e9:de:5c:69:44:4c: 23:15:15:bb:88:b5:f6:d3:2d:c8:bd:57:c4:a5:50:3d:3a:45: 16:b0:1a:1c:7b:3f:7b:e0:32:b5:a7:02:d2:3c:df:b8:7c:05: b9:85:1a:fe:4d:2b:05:9b:4d:a5:11:49:79:df:b4:95:61:3c: e8:5e:95:3e:5e:fc:99:c6:f1:8a:27:85:95:14:5e:50:c5:1e: 39:12:ee:dc:6b:87:0a:c0:06:75:d1:c4:e4:9f:3a:3d:80:57: 4e:1c:cf:c6:e4:86:c2:b3:07:e6:69:44:e4:71:53:ef:58:09: eb:a9:2e:38:27:d0:32:b5:3d:be:e3:d0:f6:43:73:0a:6e:ca: 97:89:10:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCsIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU0NTYxMTAvBgNVBAUTKDJDRTExMDA4RDJFMDNGRUIzRTYzN0FENEY3RTcyNzJF REM2MEQ1M0IwHhcNMjUwOTA0MTk0MzQ4WhcNMjUwOTExMTk0MzQ4WjAYMRYwFAYD VQQDEw02OGI5ZWJmNS0xYWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA14b4wGGZLMPWkKeWIP4khvPNBfFaP6qY5yt4TwJS7K4CELPs33FWwGGidtpQ LFoPyNUqipUeif1sDJnsia1JO8ULSj1FvPBpcjkukW1fFhY7SYubjqRmj8v0l1jZ ur1pZdLurhI+MYCsFoPzZh0a2AZQ5+kwBwbd3xGqoHCBif5NDK10xhMG4fU/20Va FkReQ+M2B4zOC1WoULVB6f+mXVmeenAcViksGjzr0C9/KeK+FFVP6KvP6yG9aBHP xdTwsWZvgC1GEXz129RuAdfXwiefX125WS0T15q8wYbWRdTQu9LUmObigZuEoHMl jdpeLlLkxh+EmXkWFoQdqtEamwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHgPpE4E +mpTwhbEnPQtGEJmHDy8MB8GA1UdIwQYMBaAFCzhEAjS4D/rPmN61PfnJy7cYNU7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTQ1Ni8yMzc4RTA4MDVF RTUxMUVBQUE1MkRFNDdDNEY5QUUwMi9MT0VRQ05MZ1Atcy1ZM3JVOS1jbkx0eGcx VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xPRVFDTkxnUC1zLVkzclU5LWNuTHR4ZzFUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTQ1Ni8yMzc4RTA4MDVFRTUxMUVBQUE1MkRFNDdDNEY5QUUwMi9MT0VRQ05MZ1At cy1ZM3JVOS1jbkx0eGcxVHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnwNK+VXx4oyhbFsR+b5b8mmZZVmWd8bLDYNJZY+E9gPvp6uKjVCoy KwObFlcu6eIkAbovOe+JVBoXcLCZVSzPsV4XY/vQVJQMi1RbnVAGyjst3Apk9jht gqMs017SDgGit8OwWkkkyaqtsCF6EHWKtHP97KrPsyTp3lxpREwjFRW7iLX20y3I vVfEpVA9OkUWsBocez974DK1pwLSPN+4fAW5hRr+TSsFm02lEUl537SVYTzoXpU+ XvyZxvGKJ4WVFF5QxR45Eu7ca4cKwAZ10cTknzo9gFdOHM/G5IbCswfmaUTkcVPv WAnrqS44J9AytT2+49D2Q3MKbsqXiRAy -----END CERTIFICATE-----Generated at Sat Sep 6 13:22:05 2025 by rpki-client